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Attorney's Docket No.: 06975-041001 / Security 01 



IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

Applicant : Larry T. HARADA et al. Art Unit : 2131 

Serial No. : 09/323,415 Examiner : A.Nobahar 

Title : STCUr^DATA EXCHANGE BETWEEN DATA PROCESSING SYSTEMS 
BOX AF 

Commissioner for Patents 
Washington, D.C. 20231 

PROPOSED CLAIM AMENDMENTS FOP TNTRRVIEW PURPOSES 
We would like to discuss the cited art as it relates to the following two propc sed 
amendments. 

Proposed Amendments 1 : 

1 (and 22). A data transfer method performed at a proxy server, the method comprising: 
intercepting a data request from a client computer that is directed to a target server, 
encrypting profile information; 

ang m^n^ c tim Hntn mqiiMt hy adding a ppending the encrypted profile infonnation to the 
data request as originally intercepted to create a n augmented data request; and 
sending the augmented data request to the target server. 

1 3 (and 25). A data transfer method performed at an information server, the method 
comprising: 

receiving an augmented data reques t, wherein the augmented data request ir eludes 
inoluding encrypted user profile information *dd»±x rr er«\rA to a data request as oi iginally 
intercepted b y a proxy server; 

extracting the encrypted user profile information added to the data request t > the proxy 

server; 

using the extracted profile information to generate a response; and 
sending the response to the proxy server. 

28. A proxy server comprising: 

a database comprising records storing user profile information; 
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a network interface operatively coupled to a network to exchange data with a client 
computer and with a target server; and 

a processor operatively coupled to the network interface, the database, aad a memory 
comprising executable instructions for causing the processor to intercept a data request that is 
directed to a target, server, retrieve a record from the database, encrypt profile infor nation in the 
record, ap pend the encryp ted profile information to th e data request as originally imgrcgEfedto 
create an augmented data reques ta ug i ncnt tho data request by adding the encrypted ; wefite 
information, and send the augmented data request to the target server. 

31. An information server comprising: 

a network interface operatively coupling the information server to a target-EO^SLserver; 

and 

a processor operatively coupled to the network interface and to a memory comprising 
executable instructions for causing the processor toi 

receive an augmented data request from the proxy server, where in the augmented 
data re quest includes encrypted user profile information appended to a data reguestas 
ori ginally intercepted bv the proxy server, 

decrypt the encrypted u ser profile informatio n add e d to the data roqn s9t4?y4he 

target server ; and 

use the decrypted user profile information to generate a response to the 
augmented d ata request. 

33. A method performed at a proxy server, the method comprising: 
receiving a request from a client; 

determining destination information associated with the request; 
determining that a target server associated with the destination information should 
receive user profile information; 

encrypting user profile information; 
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appendin g the encrypted profile information t o the data request as originally i ntercepted 
to create an augmented data reques ta ugmcnting th o request by adding moryptod uso F-pFefite 
mformatio ft; and 

sending the augmented request to the target server. 

38. A system comprising: 

apTOxy server to: 

receive a request from a client; 

determine &<Iestination information associated with the request; 

determine that a target server associated wit h the destination information should receive 
user profile information; and 

encrypting user profile information; 

a ppending the encrypted profile information to the data request as originally i ntercepted 
to create an augmented data reoues ta ugmcnt the request by adding encrypted user p tefile 
information ; and 

to send the augmented request to the target server. 
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Proposed Amendments 2: 

1 (and 22). A data transfer method performed at a proxy server, the method comprising: 

intercepting a data request from a client computer that is directed to a target server; 

encrypting profile informatio n to create encrypted profile information, wh erdnthe 
encrypted profile information is encrypted in a manner that allows the target se rver oobtain 
access to the profile' information by decrypting t he encrypted profile information; 

augmenting the data request by adding the encrypted profile information to Ike data 
request; and 

sending the augmented data request to the target server such that the target s;:ryercan 
decrypt the encrypted profile information and use the profile in formation to generate a response 
to the data request . 

13 (and 25). A data transfer method performed at an information server, the method 
comprising: 

receiving an augmented data request including encrypted user profile information added 
by a proxy server; wherein the encrypted profile information is encr ypted in a manner that allows 
the information server to obtain access to the profile informat ion by decrypting the encrypted 
profile information 

extracting decrypting t he encrypted user profile information added to the data request by 
the proxy server; 

using the extracted profile information to generate a response; and 
sending the response to the proxy server. 

28. A proxy server comprising: 

a database comprising records storing user profile information; 

a network interface operatively coupled to a network to exchange data wth a client 
computer and with a target server; and 

a processor operatively coupled to the network interface, the database, and a. memory 
comprising executable instructions for causing the processor to intercept a data request that is 
directed to a target server, retrieve a record from the database, encrypt profile information in the 
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record to create encrypted profile information, w herein the encrypted profile Mormationis 
encrypted in a manner that allows the target server to obtain access to the profile inf o rmation by 
decrypting the encrypted profile information , augment the data request by adding th* encrypted 
profile information, and send the augmented data request to the target serve r such th a t the target 
server can decrypt the encrypted profile information a nd use the profile information j o generate a 
response to the data request . 



3 1 . An information server comprising: 

a network interface operatively coupling the information server to a target server; and 
a processor operatively coupled to the network interface and to a memory comprising 
executable instructions for causing the processor to: 

-receive a data request from the proxy server that includes encrypted user profile 
information, wherein the encrypted profile inform ation was added to the dat a request by 
the proxy server and is encrypted in a manner that a llows the information server to obtain 
access to the profile information bv decrypting the en crypted profile inform; ilion, 

decrypt the encrypted user profile information added to the data request by the 
target -proxy server; and 

use the decrypted user profile information to generate a response to 1 lie data 

request. 

33. A method performed at a proxy server, the method comprising: 
receiving a request from a client; 

determining destination information associated with the request; 

determining that a target server associated with the destination information should 
receive user profile information; 

encrypting profile information to create encrypt ed profile information, wherejnthe 
encrypted profile information is encrypted in a m anner that allows the target server lo obtain 
access to the profile information by decrypting th e encrypted profile informaticm; 

augmenting the request by adding the encrypted user profile information; and 
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sending the augmented request to the target serve r such that the target server can decrypt 
the encrypted profile information and use t he profile information to generate a responsetothe 
data request . 

38. A system comprising: 

a proxy server to: 

receive a request from a client; 

determine a destination information associated with the request; 
determine that a target server associated with information should receive use i: profile 
information; and 

encry pting profile information to create en crypted profile information, wherg,inthe 
encrypted profile information is encrypted in a mann er that allows the target server t<)_gbtain 
access to the profile information by decrypting t he encrypted profile information; 
augment the request by adding encrypted user profile information; and 
to send the augmented request to the target ^rver such that the target server can decrypt 
the encrypted profile information and use the profile informati on to generate a response to the 
data request 
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